httpd-bugs mailing list archives

DO NOT REPLY [Bug 40217] - mod_dav ignores access restrictions when listing the contents of a directory

Date

Thu, 10 Aug 2006 08:03:19 GMT

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40217>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40217
------- Additional Comments From rpluem@apache.org 2006-08-10 08:03 -------
(In reply to comment #5)
>
> If you're saying you can't limit GET access to a file, you're mistaken. Apache
I did not say this I said the opposite.
> can definitely be configured not to display directories or files for which it
> itself has read access.
But this is only true if the IndexOption ShowForbidden is not set. So I must
correct myself a little bit regarding the 'non intentional' statement. Depending
on the configuration setting of mod_autoindex this behaviour is intentional.
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org